Russian state-sponsored APT threat group known as Energetic Bear has hacked and stolen data from US government networks in the last two months, the FBI and DHS Cybersecurity and Infrastructure Security Agency (CISA) said today. The hackers used several methods in their attacks including brute-force attempts, Structured Query Language (SQL) injection attacks, and also scanned for and tried to exploit vulnerable Citrix, Fortinet, and Microsoft Exchange servers. The FBI and CISA have no information to indicate this APT actor has intentionally disrupted any aviation, education, elections, or government operations.
Source: https://www.bleepingcomputer.com/news/security/russian-state-hackers-stole-data-from-us-government-networks/